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Abstract 

In this article we present a characterization of elhptic curves defined 
over a finite field ¥q which possess a rational subgroup of order three. 
There are two posible cases depending on the rationality of the points 
in these groups. We show that for finite fields F^, q = —1 mod 3, all 
elliptic curves with a point of order 3, they have another rational sub- 
group whose points are not defined over the finite field. If g = 1 mod 3, 
this is no true; but there exits a one to one correspondence between 
curves with points of order 3 and curves with rational subgroups whose 
points are not rational. 

1 Introduction 

Elliptic curves over finite fields have been largely studied in the literature 
(for example, see |B] and the references cited there). For an elliptic curve, 
we have an addition law which endows to the rational points (those defined 
over the finite field) a group structure. This group is an abelian group of 
rank 1 or 2. The type of the group is (^1,71,2), i.e. E{¥q) = Z/niZ x TLju'iL 
where \ n\ and furthermore 712 | 9 — 1- 

This structure gives us some information about the torsion points of an 
elliptic curve, but it is not easy to find them. This problem arises since 
the computation of the cardinal of an elliptic curve is, in general, very hard. 
Nevertheless, we have an easy method to test if an elliptic curve has 2-torsion 
points. If the elliptic curve has equation = + Ax + i?, the abscissas 
of the points of order 2, are given by the solutions of te cubic + Ax + B 
over the finite field. A study of elliptic curves with 2-torsion points can be 
found in |^ using elliptic curves in Legendre form. 
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For an integer n 7^ 2, the n-torsion points of an elliptic curve have 
as abscissas the roots of the classical division polynomials. These can be 
constructed recurrently: 

P_i = -1, Po = 0, Pi = l, P2{x,y)=2y 
P3 = Sx'' + 6aa;2 + I2hx - 

P2k = 0(-Pfc+2^'|_i - Pk-2Pi+i), Plk+1 = Pk+2Pi - Pi+iPk-1 

But, with these polynomials it is not possible to characterize all elliptic 
curves with a point of order n. In |7j, Mestre gives equations for _0(A^), 

= 2,3, 5, 7, 13 which parametrizes the pairs {E, C) of an elliptic curve 
E and a subgroup C of order N . He gives equations of the modular curve 
via the j- invariant of the curve. Our purpose is to present a family of the 
elliptic curves with a rational subgroup of order 3, but in their Weiertrass 
normal form. The interest of these curves comes from the study of volcanoes 
of 3- isogenics (see P). 

The structure of the paper is the following. In section [21 we present the 
elliptic curves with, at least, a point of order 3. As it is known ( 2 ), an 
elliptic curve with a 3-torsion point over a finite field, admits a model of the 
form + aix + 03^ = x^. Nevertheless, we can consider an elliptic curve 
isomorphic to the former one that depends only on one parameter (after 
fixing a non cube). We distinguish between the cases when the 3-torsion 
subgroup is cyclic or not. After this classification, we determine the number 
of isomorphism classes of elliptic curves with this property. 

Section ?? is dedicated to study when a rational point P of order 3 on an 
elliptic curve (among those mentioned in the previous section) has a point 
Q which trisects it (i.e. 3(5 = P)- This follows easily from jSj and |14j. 

Finally, in section we determine a family of representatives of all iso- 
morphic classes of elliptic curves with a rational subgroup of order 3 whose 
points are not rational. For this purpose, we compare the 3 division polino- 
mial of a curve with that of its twisted curve, to conclude that both factorize 
in the same way. Thus, the curves in section [2 are in correspondence with 
the desired curves in this section. 

2 Elliptic curves with cardinal a multiple of 3 

Let E be an elliptic curve over a finite field Fg. It's well known that E 
admits a model in Weierstrass normal form (|l()j): 

E : + aixy + a^^y = x^ + a2X^ + a^x + ae 
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The rational points of order 3 can be obtained from the 3-division poly- 
nomial. The roots of this polynomial correspond to the abscissas of the 
3-order points ^. Let E be an elliptic curve with, at least, a point of order 3, 
we can suppose, without loss of generality, that this point is (0,0). In this 
situation, E admits an equation (translating the 3-order point to the origin) 
of the type 

y"^ + aix + asy = (1) 

The discriminant of an elliptic curve of equation is A = (af — 2703)03 
and the points (0, 0) and (0, — 03) are of order 3. 

Equation can be simplified as follow: 

Lemma 1 Let E be an elliptic curve overWq with equation y^ + oix + osy = 
and let 60 £¥q be a fixed non cube. If b is a cube, then E is isomorphic 

to a curve of type y"^ + axy + y = x^. Otherwise, then E is isomorphic to 

y^ + axy -|- b^y = x^ or y"^ + axy + b^y = x^. 

Moreover, if q = —1 mod 3, all elliptic curves with a point of order 3 

admit an equation of the form + axy + y = x^. 

Proof: 

Let us suppose that 6 is a cube. Let E be the elliptic curve with equation 
+ axy -\- a^y = x^ . Replacing (x,y) by [a^x'^a^y'), it gives an equation 
of the form + [a/a)xy + y = x^. 

If b is not a cube, let p he a 3-order primitive root of the unity and 
let X be a cubic character over Fg. It is clear that x(^) = p or p^. We 
can suppose that x(^o) = P i otherwise, we take its square). If x{b) = p, 
replacing (x,y) by {u^x' ,u^y'), u = ybjbo; the elliptic curve has equation 
+ oxy + boy = x^. If x(&) = P^-, replace (x, y) by (w^x', v?y'), u = ^/b/b^ 
to get the desired equation. 

Finally, over Fg, q = —1 mod 3, all elements are cubes, therefore, all ellip- 
tic curves with a 3-order point, admit an equation of the type y'^ + axy + y = 



^Although these abscissas are defined over F,, it is possible that the point is not. So, 
they are points over ¥^2 
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2.1 Elliptic curves with cyclic 3-torsion subgroup 

The 3-division polynomial of an elliptic curve with equation y'^+axy+y = 
is P2,{x) = x(3x^ + a^x^ + 2>ax + 3). li q = —1 mod 3, this polynomial has 
two roots over Fg. Nevertheless, only the root corresponds to an abscissa 
of a 3-order point. The other root corresponds to a 3-order point defined 
over a quadratic extension of ¥q. This means that there exists a 3-order 
rational subgroup with no rational points. So, we have the following result: 

Theorem 2 Let¥q, q = —1 mod 3 a finite field, then the only elliptic curves 

with 3-order rational points are isomorphic to a curve with equation y"^ + 

axy + y = x^ , a 7^ 3. Moreover, the 3-torsion group is, in this case, cyclic 
3 

Taking into account these equations for the elliptic curves, we can count 
the number of isomorphism classes of elliptic curves over F^, q = —1 mod 3, 
with a point of order three. 

Proposition 3 Let Fg, with q = —1 mod 3 a finite field,, there exist q — 
1 isomorphic classes of elliptic curves with cardinal a multiple of 3. A 
parametrization of these classes is given by 

{y^ + axy + y = x^\a^ 3} (2) 



Proof: 



By theorem [21 let E : y"^ -\- axy + 1/ = x^ be an elliptic curve over Fg, 
g = — 1 mod 3, with a 3-torsion point. The Weierstrass normal form of this 
curve is = + Ax + B where 

a(-24 + a3) _l 
- 48 " 4 + 864 " 24' 

Over q = —\ mod 3, every element is a cube, and for each one, one only 
cubic root exists. Therefore, we can only consider the curves y'^-\-^/axy-\-y = 
x^ (this equation makes the calculations easier). The j-invariant of this curve 

a-27 • 

Let + ^/bxy+y = x^ be another elliptic curve of this type. A necessary 
condition for the elliptic curve to be isomorphic to the previous one is that 

^For all these elliptic curves, the 3-order points are (0, 0) and —(0, 0) = (0, —1) 
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both possess the same j-invariant. So b will be a root of 

,(-24 + a3) 



X-' + ia- 72)X^ + {a' - 72a + 1728)X - 27- 



to- 27 

The only root of this polynomial over the finite field considered is 
72 -a (-36 + a)^ 2 



+ ^^-27 + av^. (4) 



3 3^-27 + a 3 

Also, if they are isomorphic, there exists u £ ¥q* such that Aa = u^Ah, 
Ba = u^Bh- Replacing (jlj) in this second equation, one has that 



u 
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(^^27 + 



a 



(^-27 + a-^)2 



But, in this situation, —3 is not a square and thus, isomorphic elliptic 
curves to + \faxy + y = x'^ do not exist. □ 

For finite fields with q = \ mod 3, we have to consider all the different 
types of elliptic curves shown in lemma ^ 

: y2 + a^y + 5^y = ;r3. .^Q^^^2}. (5) 

where x(^o) = P (x is a cubic character over Fg and p a cubic root of the 
unity) . 

From the 3-division polynomial, it is easy to see that these curves will 
have cyclic 3-torsion subgroup if and only if x(276q — a^) 7^ 1. 

By Lemma ^ if = Ea^ then i = j. We also have: 

Lemma 4 Let E\^,E\^ he two elliptic curves over Fg, (7 = 1 mod 3 such 
that x(276q — af),x(276Q — af) 7^ 1 (both curves possess cyclic 3-torsion 
subgroup). -E*^ = ii'*^ if and only if: 

a2 G {ai,pai,(p + l)ai} 

Proof: 

It follows from the j-invariants of both curves. These are the only possi- 
bilities over ¥g, q = 1 mod 3 and it is easy to prove that these elliptic curves 
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are isomorphic. □ 

As x(276j, - a^) 7^ 1, deter mining the number of possible values for o, 
is equivalent to determine how many values of a exist with — 6q been a 
cube. The following result will be essential. 

Lemma 5 Let ¥q be a finite field, with 9 = 1 mod 3 and let A = 1 mod 3 be 
such that = + 27 for some B (with these conditions A is unique). 

i) The number of solutions 0/ x'^ + = 1 is exactly q — 2 + A. 

ii) The number of pairs (x, y) such that x^+y^ is not a cube t is 

Proof: 



A proof of part i) can be found in [3] . 

For each a, the number of solutions of + = a'^ is also q — 2 + A, 
except for a = 0, in that case there are 3q — 2. Therefore, since there exist 
(p— 1)/3 cubes different from 0, there will be g^ — ( ^"^^^^ (g — 2+yl) + 3g — 2) = 
(9 i)(2| 4 A) pg^-j.g such that + y^ is not a cube. □ 

Using this result we can compute the number of isomorphism classes of 
elliptic curves over ¥q, q = 1 mod 3 with cyclic 3-torsion. 

Proposition 6 Let ¥q, q = 1 mod 3 a finite field. There are {2q + 4)/3 
isomorphic classes of elliptic curves with cyclic 3-torsion subgroup. Let bo £ 
¥q be a non cube. A family of representatives is given by: 

{y2 + maxy + = ; i = 0, 1, 2, xia^ - 271^) ^ 1} (6) 

with rua = min{a, pa, {p + l)a}. 

Proof: 



First, we compute the number of isomorphism classes of elliptic curves 
of the form + axy + y = x^. This curve has a cyclic 3-torsion if and only 
if a^ — 27 is not a cube. By lemma ^ the curves y^ + paxy + y = x'^ and 
y^ + p^axy + y = x^ are isomorphic to the previous one. Therefore, the 
number of isomorphism classes of these curves is given by the number of 
cubes a^, such that xia-^ — 27) = ~ 1) 7^ 1- 
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By the previous lemma, there exist q — 2 + A pairs {x,y) such that 
+ = 1. To study the number of elements x such that both x and x—1 
are cubes, it is necessary to keep in mind the following facts. The pairs 
(0, 1), (0, p) and (0, p^) produce the same cube 0. The same fact is true for 
(1,0), (p,0) and (p^, 1) and finally for {p'x,f>>y), < z, j < 2. 

Therefore, there exist "^^"^g"*"^ cubes x^, such that — 1 is a cube. In 
consequence, there are {2q — 4 + A)/9 cubes x^ such that — 1 is not. 

In a similar way, it can be shown that there exist {4:q + 16 + ^) /9 iso- 
morphism classes of elliptic curves of the type + a'^xy + 6q7/ = .x'^ ; with 
i = 1,2, and xi*^^ ~ ^q) ^ and the result follows after adding this number 
to the previous one. □ 



2.2 Elliptic curves with non cyclic 3-torsion subgroup 

As shown in the previous section, a necessary condition for an elliptic curve 
to have non cyclic 3-torsion subgroup is that it be defined over Fq with 
q = 1 mod 3. If is defined by the equation + axy + by = x^, it is also 
necessary that x(o'^ — 276) / 1. We can change the equation to distinguish 
between those with non cyclic subgroup as follows: 

Proposition 7 The family of elliptic curves 

Ea : y^ + (3a - l)xy + a{p - l)(a - ^^)y = x^ 

such that a(a — (p + l)/3)(a — p/3) ^ corresponds to all the elliptic curves 
defined over ¥q with non cyclic 3-torsion subgroup. 

Proof: 

Let y"^ + axy + by = x'^ be an elliptic curve over ¥q with non cyclic 
3-torsion subgroup. It is clear that (by construction) one of the points of 
order 3 is the origin. Let (xq, yo) be another point of order 3 which does not 
belong to < (0, 0) > (that is xq ^ 0). Let y = \x + phe the tangent line to 
the curve in (xq, yo) (A 7^ because this point is not the origin). 

The change of variables (x, y) (A^x, X^y) transforms the equation of 
the elliptic curve in to another of the same type. The point of order 3 is 
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now {xq/\^ ^uq/X^) and the tangent line at this point has slope 1. 



The result follows easily by considering the conditions in the cubic such 
that both y = and y = x + u have a triple intersection point with the cubic 
(this can be found in [2]). □ 

Let us see now when two elliptic curves Ea and Ef, are isomorphic. It 
is clear that a {0,p/3, {p + l)/3}, otherwise it would be a singular cubic. 
Using the expressions for the j-invariants and the equations in Weierstrass 
normal form of these curves we can prove that: 

Lemma 8 Let Fg he a finite field with q = 1 mod 3 and let Ea and Ei, be 
two elliptic curves over Fq . The equations for Ea and Ei, are 

+ (3a - l)xy + a{p - l)(a - = 
respectively (such that a, 6 {0, p/3, {p + l)/3} ). Ea = if and only if 

U a r —in °(^+^) gp -1 -(l+p)(3a-l-p) p(3a-p) p(3a-l-p) 
" "-^a — 1", (3a_.p) , (3a_i_p) , 9a , 3 ' 9a ' 3(3a-p) ' 

-P (l+p)(3a-p) (l+p)(3a-l-p) (1+p) p*(3a-p) 

3(3a-l-p)' 3(3a-l-p) ' 9a ' 3{3a-p) ' 3 J' 

Ga has a group structure and it is isomorphic to Z/2Z x Z/6Z. acts 
over Fg — {0,p/3, (p + l)/3}. Then, the number of isomorphism classes of 
elliptic curves with non cyclic coincides whit the number of orbits under this 
action. To compute this number we use the well-known Burnside formula 

tt of orbits = \N3\ 
1'^'^' sec. 

where A^^ is the set of elements fixed by g. We have: 
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9 


ATS 


9 


F,-{0,p/3,(p + l)/3} 


p(3a-l-p) 
3(3a-p) 


p+V- 

3 


-p p-^-p 
' 3 


a(l+p) 


l+2p 


-P 




1 


(3a-p) 


3 


3(3a-l-p) 




3 


ap 


l+2p 


(l+p)(3a-p) 


P+l+Pv^ 


-1 p+1-pV^ 


(3a-l-p) 


3 


3(3a-l-p) 


3 


' 3 


-1 




(l+p)(3a-l-p) 




1 


9(1 


3 ' 3 


9a 




3 


-(l+p)(3a-l-p) 


1 


(1+P) 




1 


3 


3 


3(3a— p) 




3 


p(3a-p) 
9a 


1 

3 


p*(3a— p) 
3 


l+2p 
9 



Considering whether these elements belong to Fq — {0, ^, -^^^^j and the 
Burnside formula, we have the following result. 

Proposition 9 LetFq be a finite field with q = 1 mod 3. OverWg there exist 
^"^^^ ^12™°^ isomorphic classes of elliptic curves with non cyclic 3-torsion 
subgroup. 



3 Elliptic curves with rational subgroups of order 
3 containing no rational points 

In this section we are interested in elliptic curves that have no rational points 
of order three, but they have a rational subgroup of order 3. These curves 
appear when we consider rational isogenics of degree three. This is because 
the points of this rational subgroup are not invariant under the action of 
the Probenius endomorphism, whereas the subgroup is. 

Let E : y"^ = + Ax + S be an elliptic curve defined over a finite 
field ¥q and let G C E{¥q) be a subgroup of order 3 whose points are not 
rational (except the point of the infinity). Let cr : Fg ^ Fg, be the Probenius 
endomorphism: a({x,y)) = (x'',y^'). If P G G, then o-(P) = Pot —P. If it 
coincides with P, it is clear that the point P is rational, which is absurd. 
Therefore, cr(P) = —P and hence 

(x^y«) = (x,-y). 

Prom this, we deduce that the abscissa of P should be rational and in 
consequence the ordinate should be defined over ¥^2. Then jj(£^(Fg2)) is a 
multiple of 3. 
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By Weil theorem, if tJ(^(Fg)) = rn{¥g) = q + 1 - t, then ]\{E{Fg2)) = 
m(Fg2) = + 1 — + 2g. If g = — 1 mod 3, m(Fq2) is a multiple of 3 if and 
only if m{¥q) is . Therefore, all the elliptic curves with rational subgroups 
of order 3 over Fg, q = —1 mod 3, have been already studied in section |2 

Otherwise, if g = 1 mod 3, m(Fg2) is a multiple of 3 if and only if 
t = 1,2 mod 3. In the first case, the curve defined over Fg has cardinal 
multiple of 3 (already studied in section [21). In the second case, m(Fq) is 
not a multiple of 3. In consequence, we must only study elliptic curves with 
points of order 3 defined over ¥^2 but not over ¥q. Moreover, this implies 
that there exist a one-to-one correspondence between curves with rational 
points of order 3 and those with 3-order subgroups with no rational points 
(ones are the twisted of the others). 

The 3-division polynomial (the one whose roots are the abscissas of the 
points of order three) of E is 

Pa,b = x^ + 2Ax^ + ABx-—. 

The following theorem gives us some information about the factorization 
of Pa,b over F^, q = l mod 3. 

Theorem 10 ([5j) Let p be an odd prime and let f{x) he a monic polyno- 
mial of degree n and discriminant D without multiple roots. Let f[x) = 
fi{x)f2{x)---fr{x) modp be the factorization of f over ¥p. Then n = 
r mod 2 if and only if (D/p) = 1. 

The discriminant oi Pa,b is -2^{4:A^+27B'^f /27. Over ¥g,q=l mod 3, 
— 1/3 is a square. So, one has that Pa,b factors into two polynomials or it 
has all its roots in ¥q. If it factors into two polynomials, the possibilities for 
its degree are (2, 2) or (3, 1). In the latter case, Pa,b has a root in ¥q. 

Using the results of TT|, these three types can be distinguished in the 
following way. If x(2(27-B2 + 4A^)) / 1, then Pa,b = {x - xo)f2{x) 
with /2(x) an irreducible polynomial of degree 3. Otherwise, we define 
2/0 = 2^2(27^2 +4A3)/3. If yo + 16A/3 and pyo + 16A/3 are both squares, 
then Pa.b factors completely over ¥q. Otherwise, Pa,b factors in two irre- 
ducible quadratic polynomials. 

With these results, we have that the type ot factorization of Pa,b co- 
incides with the that of P^At'-^Bi where i is a non quadratic residue. That 
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corresponds to the 3-division polynomial of the twisted curve. 



As we have shown previously, elliptic curves with rational points of order 
three are the twisted of those with subgroups of order 3 with no rational 
points. Thus, if = + Ax + is an equation for an elliptic curve with 
3-torsion points, then = + t^Ax + t^B {t a non quadratic residue), is 
a curve with a rational subgroup of order 3 with no rational points. As we 
have studied in section I^Jthe curves of the first type, determine those of the 
second type from their Weierstrass form. 

Proposition 11 Let Fg, q = 1 mod 3 be a finite field and bo G ¥q, such 
that xibo) = P- Let t be a non quadratic residue. There exist {2q + 4)/3 
isomorphism classes of elliptic curves over ¥q with only one rational sub- 
group of order three, whose points are defined over Fg2 \ ¥g. A family of 
representatives is given for = + t'^Ax + t^B with 

aHa^ - 24bl) _ b^ _ a% 

" " 48 - 4 ^ 864 24 ' 

i = 0,l,2 x(a' - 276i,) 1 

Proof: 



Elliptic curves of equation © {y^ + a^xy + b^y = ; i = 0, 1, 2, xio-^ — 
276q) 7^ 1} correspond to those curves with a non cyclic 3-torsion subgroup 
whose points are defined over ¥q. Therefore, their twisted curves will have 
a rational 3-torsion subgroup of points defined in a quadratic extension. 

The Weierstrass normal form of elliptic curves with equation © is 

^ 48 J-^+f + 864 -^- 

In consequence, the equation of the twisted curve coincides with the de- 
sired one. 



Let y"^ = x^ + t^Ax + t^B and y'^ = x'^ + t^A'x + t^B' be two of these 
curves. They will be isomorphic over ¥q, if and only if there exists u G ¥q* 
such that = A/A' , = B/B' . Or equivalently, if and only if the curves 
-|- a^xy + b^y = x^, y'^ + a'^xy + b^y = x^ are isomorphic. The number of 
isomorphism classes follows from proposition |H1 n 
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Two curves of this type will be isomorphic if and only if 

02 G {ai,pai,{p + l)ai}. 

We can prove, in the same way, the following result: 

Proposition 12 Let ¥q be a finite field with q = 1 mod 3. Over ¥q there 
exist ^+^^"(9^™°^ isomorphism classes of elliptic curves with 4 rational 
subgroups of order 3 composed by points defined over ¥^2. A collection of 
representatives is given by y'^ = + t^Ax + t^B with t a non quadratic 
residue and 

^ _ (9a- 1 - 2p) (3a- 1- 2p) (3a- 1) (3a+ 1) 



144 

^ _ (l+9a^ ) (9a^ -6a-6pto-l){9a^ -6pto-l) 



864 

Two curves of this type are isomorphic (the same as it happened with 
those with 8 rational points of order 3) if and only if 

h (Z n —In ap -1 -(l+p)(3a-l-p) p(3a-p) p(3o-l-p) 

^'^'^a — t", (3a-p) ' (3a-l-p) ' 9a ' 3 ' 9a ' 3(3a-p) ' 

-P (l+p)(3a-p) (l+p)(3a-l-p) (1+p) p*(3a-p) 

3(3a-l-p) ' 3(3a-l-p) ' 9a ' 3(3a-p) ' 3 J • 
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